A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Contact: mailto:admin@platinum.id
Encryption: https://platinum.net.id/.well-known/pgp-key.txt
Encryption: https://platinum.net.id/.well-known/ssl-bundle.crt
Canonical: https://platinum.net.id/.well-known/security.txt
Canonical: https://www.platinum.net.id/.well-known/security.txt
Policy: https://platinum.id/.well-known/security-policy.html
Expires: 2026-06-15T22:00:01+00:00
Preferred-Languages: id, en
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAABAgAGBQJoT6LcAAoJEApcUSnwGBaLm0EH/RPZoQ5B00/TUMqN+7AcOLaT
UNGvOw+NQ6Q1z9/jSmNJ6X1TAMQumH162PqWHnorUZyBkjKTS1JFxGL61CUL37UE
l39SryuYdk7n4Clad6qgFjN89PLe/DWQyPVik8IMg5hAtTHnyho+DvaOteeUZrgb
KW1w5DZ+el2Y/JHkUaYnZeu2ACt+RwNcPhsaAYew/OnCONOAwOyQYTBph5Q6u+A7
mE2sJySiK0IbZTabEYuGuCoeyF/SJDEdGQ2o65AYu5pCTySL+BU32yNT+hoh9ERQ
yrLF4d1wf1Rby1Kp/38o0yduCg6QTHkWbE3nOZZV+3I7oVnGVfX7+uUzT/4sr80=
=oMeJ
-----END PGP SIGNATURE-----